Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: h8cANUNEl05vFjF8dfiSXLTx745i/oso/8nxbPmJbQA=
Subject key identifier: 55:30:1A:27:65:F4:16:02:0A:2D:5B:F7:8B:5F:9E:F3:CF:70:3F:08
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019CAB33F88B12468FADF54A9EE330E13F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0838
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: bAWPTQzFCpHT4+RopW/zUANuqgeyItNUFsrJcv9WFk0=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f8:8b:12:46:8f:ad:f5:4a:9e:e3:30:e1:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=55301a2765f416020a2d5bf78b5f9ef3cf703f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:cd:ea:db:a3:0c:af:8b:6e:5b:e3:ee:5c:
b3:b2:96:f6:78:09:21:8b:07:64:96:15:18:f5:18:
8e:b6:6c:5a:2f:b0:5d:1e:a4:54:a9:eb:fb:4c:33:
bd:1c:72:4d:d2:c3:5b:15:fa:60:b1:79:f3:06:55:
e6:8b:a2:17:fb:fc:f2:c6:c6:78:2c:dc:e9:bb:6f:
e7:b2:84:1b:53:89:b1:7b:f8:b5:0f:70:37:05:c6:
c7:18:5a:af:cf:03:7a:91:c6:80:c4:c9:cd:c0:db:
34:e8:71:07:2c:8c:6e:5e:ab:83:db:a7:10:7e:61:
d0:20:6c:69:5b:23:6b:78:4a:e4:18:f9:29:7e:52:
2c:9b:7a:58:ff:78:a8:9a:6e:4b:e9:72:c3:c1:36:
05:e9:80:d4:c9:5a:d8:aa:c1:11:88:1d:44:49:e9:
bb:69:5e:d8:9f:f9:18:cf:35:0e:ae:cc:51:a1:ee:
b4:4e:6d:7d:90:19:4d:cd:4d:61:dc:d1:5c:1d:9b:
2c:16:a3:c2:dd:f5:e5:a6:41:ba:c6:b0:9a:f8:81:
98:4b:7f:ae:45:8d:50:8f:28:c8:49:b1:a9:cd:6e:
35:41:97:1a:af:e2:9b:61:1a:62:4a:d0:c8:f4:09:
c1:24:4f:51:ae:0c:b7:f7:54:a1:7f:7e:22:aa:d0:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:1A:27:65:F4:16:02:0A:2D:5B:F7:8B:5F:9E:F3:CF:70:3F:08
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7c:08:bb:48:9b:f8:42:8e:f4:13:cc:92:01:ac:06:7a:4e:
30:51:88:7c:86:f9:4b:f5:89:a6:af:67:e6:86:5e:45:74:bc:
be:c4:bc:da:dd:2f:19:47:7c:7f:68:dd:cc:4c:93:7d:36:5d:
78:6b:f8:b8:ee:46:7a:6c:41:e3:ad:1d:76:12:8d:50:83:e5:
b9:fd:31:2c:17:3f:89:0b:89:22:38:84:a9:e2:2b:c5:ca:62:
8c:39:7b:70:06:74:b7:14:fe:e1:5a:08:6e:9a:f5:c8:67:2a:
53:70:98:37:16:57:c9:aa:30:1b:f7:8f:83:71:eb:17:8d:c9:
4d:78:af:17:29:94:5a:91:cf:4b:5e:36:e6:d1:7d:51:4a:9e:
87:a6:f7:d4:a8:d7:99:9d:f7:77:a9:9a:c1:c6:ea:d3:d5:14:
fe:4f:61:dc:cc:6a:92:fc:23:01:f2:69:82:de:8d:e0:73:91:
ec:0f:f6:6a:07:76:8d:97:36:ba:7b:39:d6:d3:84:83:f9:25:
28:5c:0b:28:c1:38:5b:ba:bc:e4:46:74:55:7b:94:8a:69:b2:
5c:ba:f1:9b:73:10:18:dc:5c:24:1c:9a:ed:4b:65:37:2a:47:
7b:d5:f0:dd:f5:95:f8:ac:ec:78:e3:d4:f9:92:84:21:38:a0:
2d:61:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:48 2026 by rpki-client